
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft
File: D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft (raw, json)
Hash identifier: ZTAL3IEUgxR7wHzHrQVU1fmwTQmC9eSZJLMoBsYR3VI=
Subject key identifier: 16:89:19:80:F7:A8:FE:05:02:DB:00:63:A8:DA:2B:01:60:A7:44:15
Authority key identifier: D0:EA:0A:A8:C3:46:FE:67:3C:68:67:F2:B9:CA:06:81:9F:58:C4:72
Certificate issuer: /CN=A9120CDE0000/serialNumber=D0EA0AA8C346FE673C6867F2B9CA06819F58C472
Certificate serial: 2B0F7EFC7EE146D99CDAD920D6A9C983AFEEE334
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OoKqMNG_mc8aGfyucoGgZ9YxHI.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft
Manifest number: 0E
Signing time: Fri 12 Jun 2026 00:34:34 +0000
Manifest this update: Fri 12 Jun 2026 00:29:34 +0000
Manifest next update: Sat 13 Jun 2026 01:33:34 +0000
Files and hashes: 1: 3130332e3132332e342e302f32322d3232203d3e2034383337.roa (hash: uzVKo4gitP7RigvC6WVexzNZzL0YYShPIrlVbSuh1Mw=)
2: 3130332e3132332e342e302f32332d3233203d3e2034383337.roa (hash: k74aKc9hrGjjKtFfU03UFmb5lbVypa9TVHs7t7K9DFc=)
3: D0EA0AA8C346FE673C6867F2B9CA06819F58C472.crl (hash: M3YW8taeOvaSwRblnflVCKapshCE4JnRsEyXqWFgqj4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.crl
rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OoKqMNG_mc8aGfyucoGgZ9YxHI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 01:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:0f:7e:fc:7e:e1:46:d9:9c:da:d9:20:d6:a9:c9:83:af:ee:e3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120CDE0000, serialNumber=D0EA0AA8C346FE673C6867F2B9CA06819F58C472
Validity
Not Before: Jun 12 00:29:34 2026 GMT
Not After : Jun 13 01:33:34 2026 GMT
Subject: CN=16891980F7A8FE0502DB0063A8DA2B0160A74415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2d:f4:08:54:e1:79:f9:a2:3f:05:8c:e1:51:
8c:42:d2:92:2e:fa:d2:3f:e7:a3:fd:4d:e2:46:93:
4d:45:96:a2:90:84:88:2b:32:ea:3e:10:10:79:13:
e6:d1:24:76:e5:c5:6f:d6:09:16:e2:91:6b:35:ba:
38:9d:2c:71:d8:a4:15:bf:0d:49:c9:1d:9a:9a:11:
af:52:61:c4:f6:93:dc:10:1f:0a:80:9f:79:86:b1:
a8:cd:fb:86:8d:e5:8f:1f:4a:f7:67:2f:b2:eb:77:
33:8a:65:06:d7:7a:02:f4:c0:46:dc:b7:30:98:56:
d4:cd:a2:e3:72:5b:9c:fd:f6:52:41:45:4e:39:0b:
af:80:42:af:f9:fd:82:78:28:27:44:b2:bc:d2:50:
cd:96:e8:ba:bf:6f:66:cb:0c:d4:3e:2f:a1:ba:bd:
44:9d:8c:59:1c:8a:d7:f9:02:0c:8c:8b:0b:6b:f0:
1c:c9:b4:ef:77:05:7f:6a:76:d2:bc:f3:8e:c1:a9:
13:37:cb:ec:93:da:8d:ce:f7:02:23:3f:5b:37:2b:
6c:fb:34:1a:9e:59:1a:bf:21:5d:eb:bc:86:da:8c:
32:ae:1c:24:05:0b:7f:43:4b:c6:43:5a:a6:7d:b1:
fe:64:42:bc:ec:93:dd:0f:0b:db:57:4d:f4:48:c4:
8f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:89:19:80:F7:A8:FE:05:02:DB:00:63:A8:DA:2B:01:60:A7:44:15
X509v3 Authority Key Identifier:
keyid:D0:EA:0A:A8:C3:46:FE:67:3C:68:67:F2:B9:CA:06:81:9F:58:C4:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OoKqMNG_mc8aGfyucoGgZ9YxHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:53:45:51:de:88:05:6e:2f:14:8c:0f:c6:8a:16:b9:6e:38:
c3:78:d3:62:68:aa:cc:92:c9:9c:68:37:32:8d:dd:9e:15:a4:
b5:aa:01:8d:5b:9d:fe:a0:bf:cc:8f:2d:02:60:20:ae:19:81:
3d:7b:47:9a:2a:ce:e4:8f:76:af:49:64:92:24:74:00:43:e9:
93:a4:ef:77:d7:88:a7:89:5b:1e:39:5a:7b:66:3f:c2:8d:e4:
15:e2:7c:3e:b0:c9:6d:c0:7e:51:41:18:86:d0:7d:a3:72:f9:
57:59:c0:b2:c8:4b:01:df:9b:c3:06:3a:de:09:dc:04:a0:b3:
8b:27:89:d8:47:68:74:e7:56:3a:b9:07:e0:b4:d3:da:4b:b6:
fb:2a:79:d8:66:c6:02:67:e1:44:c2:fa:47:7a:9a:78:0c:fd:
44:98:4a:ab:51:40:6f:80:fa:f5:53:5a:7e:d5:7e:d0:92:ed:
8d:81:84:03:4a:13:a1:7c:0a:b2:5e:cd:c2:d7:2b:ba:03:71:
81:5a:98:38:0d:5d:4e:a9:2a:11:16:a1:13:1e:26:ee:1a:7c:
15:ac:dd:8e:7f:b0:16:5d:52:3f:37:83:ca:a1:f9:ff:ec:01:
6e:83:22:8f:3b:c4:59:e1:a0:aa:10:04:ce:be:74:d8:14:c3:
16:84:c1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:48:51 2026 by rpki-client